Karim Roshdy

Interested in information security and event monitoring within Security Operations Centers (SOC), with a background in governance, risk, and compliance (GRC). Possesses practical knowledge of attack techniques, detection methods, and risk severity assessment, along with a solid understanding of monitoring and incident response processes.

Head of Cybersecurity – IEEE MET SB

• Led SOC lab projects and security monitoring
• Configured and monitored SIEM (Elastic Stack, Splunk), EDR (Wazuh), and WAF (ModSecurity)
• Log collection, parsing, normalization, and incident analysis
• Network traffic monitoring and threat detection

• Analyzed SIEM alerts and security logs from multiple sources
• Investigated incidents and reported findings
• Assisted in configuring IDS/IPS (Snort) and security tools

• Built Windows Active Directory lab for threat simulation
• Malware traffic analysis (Koi Stealer, fake Google Authenticator)
• Web server hardening (Nginx + ModSecurity WAF)
• VLAN segmentation and network monitoring

SOC analyst and monitor logs